Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File:                     YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier:          Qy/RIWUaWv0WABRFMZYxorJiW6y1Ps+YS/tkzBeH6Lk=
Subject key identifier:   04:E0:FF:3C:93:09:1D:B1:10:55:2A:7A:AC:D9:DA:C1:B1:29:93:60
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer:       /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial:       019F8E6B8B974B22609517F4BE516520FC1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 10:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:40 +0000
Files and hashes:         1: GYvctFRB0vL8CZ5WGPseD7TX41k.asa (hash: FEPj7H6wY/hkKzVpHOSMzB1AZDSrZKxs+Mx7brcM7YM=)
                          2: M-O71STwS8Kp5niFGIFQhYvdlWo.roa (hash: yLzi9tjJQyrnPyV+LD1bidPc5F2jwLqmN1OObhiODg4=)
                          3: Xco1tcKWr3OJsK2GRTGEy3uXjCI.roa (hash: MmiJmWSzx/Ap053j4ROh2ZTks4oLbkSzRhXee+eiqmg=)
                          4: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: nlAYMm/MYu8UmD+V1ftkp4UXlvvDDp/12adwiY0sadU=)
                          5: kVbtdxl5r7rl44HYKA5sht2hTPA.roa (hash: pDR06QMON/0Rz4oTXhPHJgXDsLVRiWPUPc+NTcHziwk=)
                          6: opYh8BW3Px-SsN2AJRky4WXGDvE.asa (hash: 6XAoprCBdoN1kf4Hkc9CL/33HHtfBuc4951sqVW/spg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6b:8b:97:4b:22:60:95:17:f4:be:51:65:20:fc:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
        Validity
            Not Before: Jul 23 10:00:40 2026 GMT
            Not After : Jul 24 10:00:40 2026 GMT
        Subject: CN=04e0ff3c93091db110552a7aacd9dac1b1299360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:de:34:72:cf:b8:51:bc:27:d3:86:0b:1e:
                    81:46:34:36:84:b6:21:ce:9f:ee:d7:ed:cb:59:2c:
                    11:0f:3f:f0:a6:f9:5a:03:68:f5:0a:92:38:54:0f:
                    92:88:26:52:d0:89:5e:b2:0b:d7:3f:46:05:90:4d:
                    34:4f:a7:bb:59:71:e7:ab:e7:07:a1:a1:37:2e:58:
                    48:19:fb:68:12:11:d7:18:13:33:3b:7e:9b:30:ca:
                    82:a5:5c:f7:43:f8:12:da:a0:67:e4:7a:9a:57:16:
                    e4:1b:54:54:cc:38:c7:1d:49:a1:90:fc:9e:06:26:
                    16:00:99:01:07:08:5f:2f:f6:35:f9:86:38:11:be:
                    4c:6f:aa:a8:02:b3:96:de:c5:31:39:95:be:65:a3:
                    7f:9a:2e:03:df:0b:a4:53:5b:72:73:b4:5c:ad:d2:
                    c2:b3:4f:6b:84:eb:72:c1:a4:6b:ac:fe:13:60:19:
                    54:17:26:39:ff:a1:db:08:39:83:fa:56:4b:68:90:
                    a4:49:e2:ba:c0:a5:72:e1:53:90:26:e1:1b:b2:71:
                    c7:ab:b4:01:87:db:aa:89:cf:6b:19:a3:66:82:93:
                    7d:59:96:32:09:ff:68:e3:4e:12:d5:50:26:09:36:
                    21:e6:d0:3b:de:86:e7:ad:49:a2:48:a9:b1:c4:e5:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E0:FF:3C:93:09:1D:B1:10:55:2A:7A:AC:D9:DA:C1:B1:29:93:60
            X509v3 Authority Key Identifier:
                keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:88:e7:c7:64:50:23:bd:17:cd:a7:2b:1f:46:35:fe:04:14:
         f8:4e:6f:37:77:aa:98:8a:6d:bb:a3:61:14:9e:a9:44:7c:a4:
         3c:59:dd:3b:bd:8f:5c:d2:74:dd:fb:09:88:69:fd:8d:69:be:
         a3:3d:7a:84:ad:ef:3c:81:46:0e:0c:4b:90:01:af:00:f5:16:
         e5:a6:1e:e9:d0:10:76:82:79:aa:57:d4:b7:88:1f:7c:44:d1:
         00:69:96:18:23:90:3e:59:9d:51:89:66:88:a1:15:8d:71:23:
         06:b4:51:c4:d0:48:0e:21:31:d7:48:f7:4e:ef:fc:8b:18:8f:
         29:e6:eb:19:d2:1e:57:9c:5a:51:93:89:98:e1:8d:0e:e9:66:
         c8:59:79:66:3f:54:cc:4c:b7:7a:aa:14:3b:f0:ae:05:62:c9:
         8a:11:73:dd:8e:70:3d:2f:9a:0a:d4:b1:3c:1c:7e:ae:cb:5e:
         35:f5:75:a8:8a:5c:d3:ff:36:57:dd:cc:93:28:9d:47:72:e9:
         6b:fc:da:19:88:a6:43:31:d7:cd:dd:b4:ae:32:63:ac:80:78:
         d0:15:2f:df:cc:df:ba:70:4d:72:d1:4f:63:59:56:4c:ff:1d:
         66:99:c5:20:78:48:e0:36:71:ef:ae:ce:76:e5:83:b2:7f:7b:
         7a:a4:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:08 2026 by rpki-client